You want new_create_dissector_handle(). find_dissector() is used
to obtain a handle for an already registered dissector.
Take a look at the example given in section 1.2 of doc/README.developer and packet-cmp.c’s
handoff function as another example.
From:
wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Varun Gupta
Sent: Monday, December 21, 2009 7:00 AM
To: wireshark-dev@xxxxxxxxxxxxx
Cc: Sanjay Dhand
Subject: [Wireshark-dev] Query on proto_reg_handoff_<>
Hi
All,
I
am new to wireshark development and having some doubt regarding my new
dissector development:
In
my “proto_register_bsapb64()” I
have done the
{
proto_bsapb64 = proto_register_protocol("ANSI
BSMAP B64 Coding",
"BSMAP BASE64", "bsapb64");
And
new_register_dissector("bsapb64", dissect_bsapb64,
proto_bsapb64);
}
And
In “proto_reg_handoff_bsapb64()”
function I want to do :
{
dissector_handle_t bsapb64_handle;
<????????>
dissector_add_string("media_type",
"application/FemtoInterfaceMsg", bsapb64_handle);
}
So
my doubt is to get the bsapb64_handle whether I should be doing “new_create_dissector_handle(dissect_bsapb64, proto_bsapb64)” or “find_dissector(“bsapb64”)”
I
am really confused over there uses.
Any
help would really be appreciated. Thanks.
Regards,
Varun
"DISCLAIMER:
This message is proprietary to Aricent and is intended solely for the use of
the individual to whom it is addressed. It may contain privileged or
confidential information and should not be circulated or used for any purpose
other than for what it is intended. If you have received this message in error,
please notify the originator immediately. If you are not the intended
recipient, you are notified that you are strictly prohibited from using,
copying, altering, or disclosing the contents of this message. Aricent accepts
no responsibility for loss or damage arising from the use of the information
transmitted by this email including damage from virus."